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Abstract 

Rate-(n — 2)/ri unrestricted and CSS-type quantum convolutional codes with up to 4096 
states and minimum distances up to 10 are constructed as stabilizer codes from classical self- 
orthogonal rate-l/n F4-linear and binary linear convolutional codes, respectively. These codes 
generally have higher rate and less decoding complexity than comparable quantum block codes 
or previous quantum convolutional codes. Rate-(n — 2)/n block stabilizer codes with the same 
rate and error-correction capability and essentially the same decoding complexity are derived 
from these convolutional codes via tail-biting. 

Index terms: Quantum error-correcting codes, CSS-type codes, quantum convolutional codes, 
quantum tail-biting codes. 

I. Introduction 

Quantum error-correcting codes (QECCs) protect quantum states from unwanted perturbations, 
allowing the implementation of robust quantum computing and communication systems. 

The first breakthrough in this field was Shor's demonstration in 1995 via a 9-qubit single-error- 
correcting code [28] that quantum error-correction was even possible, which was not obvious a 
priori. Shortly thereafter, a more efficient 7-qubit single-error-correcting code was found by Steane 
[29j and by Calderbank and Shor [5j. This code was merely the first of a class of quantum codes 
based on classical binary error-correcting codes, which we call CSS-type codes. Later in 1996, 
an even more efficient 5-qubit single-error-correcting code was found by Bennett et al. [2] and by 
Laflamme et al. [22]. 

Soon thereafter, a general theory of stabilizer codes was developed [H [HI [24l El] , which includes 
the above codes as particular cases, and indeed essentially all QECCs developed to date. The 
stabilizer formalism, which we review below, has the virtue of reducing the QECC problem to pure 
mathematics, and thus allowing non-physicists to contribute to the field. In particular, it shows 
how to convert certain classical F4-linear and binary error-correcting codes to QECCs [7J. 
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In this paper, we systematically develop quantum convolutional codes (QCCs) using the same 
general principles. We focus on rate-l/n codes, where we can exhibit some simple and attractive 
codes as examples, but our construction principles are general. 

Practical classical communication systems have mostly used convolutional codes rather than 
block codes, because convolutional codes are generally superior in terms of their performance- 
complexity tradeoff. In quantum coding, it is still too early to say which characteristics of QECCs 
will turn out to be the most important. However, we find that quantum convolutional codes 
compare favorably with quantum block codes in the following ways: 

• Code rate. In general, QCCs require fewer encoded qubits to protect the same number 
of information qubits than comparable block codes. For example, our rate-1/3 single-error- 
correcting QCCs are comparable to the 5-qubit and 7-qubit single-error-correcting block codes 
mentioned above, but have higher code rate. 

• Decoding complexity0 In general, QCCs have simpler decoding algorithms. For example, we 
present extremely simple decoding algorithms for our single-error-correcting QCCs. 

• Performance. In general, QCCs have a superior tradeoff between performance and complexity. 
For example, our rate-1/3 single-error-correcting QCCs have comparable error probability to 
the 5-qubit and 7-qubit block codes, even though they have higher rate and simpler decoders. 

One possible drawback of QCCs is their lack of a natural block structure. Previous authors 
have proposed terminating QCCs to yield block codes with the same error-correction capability, at 
the cost of reduced rate (sometimes without recognizing that a terminated convolutional stabilizer 
code may not be a valid (i.e., self-orthogonal) block stabilizer code; see Section III-C.) We propose 
instead to construct quantum tail-biting codes (QTBCs), which are block stabilizer codes that 
retain the same code rate, error correction capability, and decoding algorithms as the QCCs from 
which they are derived, provided that the block length is large enough. We exhibit families of 
rate-l/n QTBCs with attractive performance-complexity tradeoffs. 

Surprisingly, no one previously seems to have constructed QCCs that are clearly superior to 
quantum block codes by a straightforward extension of the stabilizer formalism. Chau [U |T0] 
proposed two "quantum convolutional codes:" the first involves a one-to-one convolutional sequence 
transformation followed by a quantum block code, has the same performance and complexity as 
the block code, and thus is arguably not really "convolutional;" the second generalizes Shor's 
concatenated construction to convolutional codes, and yields a single-error-correcting rate-1/4 QCC 
that corrects 1 error in every 8 qubits, comparable to a [8, 2, 3] shortened quantum Hamming code 
(see Section II. E below). Ollivier and Tillich [25\ I26| constructed a rate-1/5 single-error-correcting 
QCC using the stabilizer formalism, but unfortunately their example QCC does not improve on 
the comparable 5-qubit block code in either performance or complexity. However, they do address 
various gate-level implementation issues that we do not address in this paper. (For further results on 
quantum convolutional encoders, see [IHj-) More recently, Almeida and Palazzo [1] have proposed 
rate-1/4, -1/3 and -2/4 convolutional codes using a Shor-type concatenated construction; these 
codes appear to be much more complicated than ours to decode. 

^In this paper, "complexity" will always mean decoding complexity; we do not consider complexity issues at the 
quantum gate level. Moreover, the decoding computation after the measurement of syndromes is entirely classical. 
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In Section II, we briefly review stabilizer codes, particularly F4-linear and CSS-type codes. In 
Section III, we show how to construct quantum convolutional and tail-biting codes from classical 
self-orthogonal F4-linear and binary convolutional codes. We give examples of simple rate- 1/3 
single-error-correcting F4-linear and CSS-type QCCs and QTBCS, and their decoding algorithms. 
In Section IV, we briefly summarize the algebraic structure theory of rate-l/n linear shift-invariant 
convolutional codes and their orthogonal codes, and specify the relevant symmetries of these codes 
in the QECC context. In Section V, we tabulate rate-l/n single-error-correcting codes and the 
corresponding tail-biting codes. In Section VI, we present the best rate-1/3 codes with state space 
sizes up to 2048 and minimum distances up to 10, with their corresponding tail-biting codes. 

II. Review of stabilizer codes 

In this section we review the stabilizer formalism, originally developed by Calderbank et al. [6] 
and Gottesman [Ijj, in order to fix nomenclature and notation. We focus especially on F4-linear 
stabilizer codes [7j and CSS-type codes [5l [29]. 

A. Qubits and Pauli matrices 

A qubit is a quantum system whose Hilbert space Ti. is two-dimensional. 

Given a basis for 7i, a basic set of unitary Hermitian operators on 7i is the set 11 = {/, X, Y, Z} 
of Pauli matrices, defined by 

1 

-1 ■ 

The multiplication table of these matrices is evidently as follows: 
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Their commutation properties may therefore be summarized as follows: if A and B are two Pauli 
matrices, then AB = BA if A or i? is the identity or if A = B; otherwise AB = —BA. 

The set 11 is not a multiplicative group, because it is not closed under multiplication. However, 
let us consider instead the set [11] = {[^] | ^ G 11} of equivalence classes of Pauli matrices defined by 
[A] = {j3A I /? G C, |/?| = 1}; i.e., B is equivalent to A G 11 if S = I3A, where /? is a unit-magnitude 
complex numbero From the multiplication table of 11, multiplication in [11] is well defined and 
commutative, since [A] [5] = [^][^] = [AB\ = [BA\. The multiplication table of [11] is 
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^Previous authors restrict /3 to {±1, ±i}, which suffices to make [11] a group; however, aUowing /3 to range over 
aU unit-magnitude complex numbers is more natural physicaUy. 
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Thus [n] forms a commutative (abelian) multiplicative group, which we will call the projective Pauli 
group. 

By inspection, the projective Pauli group [11] is isomorphic to the group {^2)"^ = {00, 01, 10, 11} 
of binary 2-tuples, whose addition tabic is 
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Alternatively, the projective Pauli group is isomorphic to the additive group of the quaternary field 
F4 = {0, 1,0;, aJ}, whose addition table is 
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In short, + a = a, a + a = (so subtraction is the same as addition), and 1 + lo + io = 0. 

These tables have been arranged to suggest that the elements of [11] , or their representatives in 
n, may be labeled by elements of (^2)^ or of F4 according to the following correspondences: 
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Then the label maps £ : [11] — > (Z2)^ and L : [11] — F4 that are defined by these correspondences 
are isomorphisms; i.e., 

e{[A]) + £{[B]) = i{[AB]y, L{[A]) + L{[B]) = L{[AB]). 

By a slight abuse of notation, we may apply the label maps i and L to 11, or to any matrices 
in the equivalence classes [A] G [11]. By a further slight abuse of notation, we may pass between 
two-bit and quaternary labels via label maps £ : F4 — > (1^2)'^ and L : (^2)^ F4. 

The two label bits in i{A), namely ii{A) and i2iA), represent a bit flip and a phase flip, 
respectively, since X (or any PX, = 1) is a bit flip operator, Z is a phase flip operator, and 
Y = iXZ is a combination of a bit flip and a phase flip. 

Finally, we may use the quaternary labels to characterize the commutation properties of Pauli 
matrices. The traces of the elements {0, 1,lo,lo} of F4 are defined as {0, 0, 1, 1}, and their conjugates 
are defined as {0, l,aJ, a;}. The Hermitian inner product of two elements a, 6 G F4 is defined as 
(a, b) = a^b G F4, where denotes conjugation. The trace inner product is defined as Tr (a, b) G 
F2. Thus the multiplication, Hermitian inner product, and trace inner product tables of F4 are 
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Comparing the trace inner product table of F4 with the multiphcation table of 11, we see that two 
matrices A, 5 G 11 commute if Tr {L{A),L{B)) = 0, and anticommute if Tr {L{A),L{B)) = 1. In 
other words, 

AB = (-1)^ {l{A)MB))ba. 

A corresponding inner product may be defined over (^2)^ (a "symplectic" or "twisted" inner 
product) such that a similar result is obtained; however, we will have no need for such a binary 
inner product in this paper. 



B. Multi-qubit systems and Pauli n-tuples 

An n-qubit system is a quantum system whose Hilbert space Ti. is the tensor product of n two- 
dimensional spaces, and is thus 2"-dimcnsional. 

A Pauli n-tuple A = Ai A2 <E) ■ ■ ■ A n is a tensor product of n Pauli matrices Ai,l i K n, 
that act separately on each of the n qubits. The set of all 4" Pauli n-tuples will be denoted by 11". 

The product of two Pauli n-tuples is the componentwise product of its elements: 

AB = (AiBi) ® (^2-62) ® • • • ® {AnBn). 

Consequently the product is a Pauli n-tuplc up to phase. If wc again define equivalence classes of 
Pauli n-tuples up to phase by [A] = {/3A |/?€C,|/?| = 1}, then we obtain a well-defined product 

[A][B] = [AiBi] (8) [A2B2] (8) ■ ■ • [AnBn] = [AB]. 

Thus the set of 4" equivalence classes of Pauli n-tuples is a commutative multiplicative group 
[n"] which is isomorphic to ((22)^)". We may thus label the elements of [11"] by binary 2n-tuples 

in ((^2)^)", or by quaternary n-tuples in (F4)", by extending the label maps i and L of the previous 
subsection. The resulting label maps remain isomorphisms; i.e., 

ii[A]) + £([B]) = ^([AB]); L([A]) + L([B]) = L([AB]). 

Finally, the Hermitian inner product over (F4)" is defined by the componentwise sum (a, b) = 
Yli(4^i- The trace inner product over (F4)" is therefore also a componentwise sum: 

(n \ n 

J^HAYHBi)] =J2T^L{AYL{Bi). 
i=l ) i=l 

Thus the single-qubit Pauli matrix commutation relation may be extended to Pauli n-tuples: 

BA = (-l)T'- (^A),L(B)>^B_ 
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C. Stabilizer and normalizer codes 



Within the stabihzer formalism, an [n, k] stabilizer code is defined by a set of n — A; independent 
{i.e., none of the generators is equivalent to a product of the others, up to phase) commuting Pauli 
n-tuples G = {Gj, 1 < j < n — k}, where < k < n. The code subspace is the common eigenspace 
S of the generators Gj € G such that the eigenvalue of each Gj G ^ is +1; i.e., S is the subspace 
of H that is stabilized by Q. 

The stabilizer group S C [11"] is defined as the set of all of equivalence classes in [n"] of all 2""'^ 
products of the n — k generators Gj € Q. By the independence condition, the equivalence classes 
of these 2"-~'' products are distinct. 

The binary stabilizer label code £{S) is then the image of S under the binary label map. Since 
£ : S ^ £{S) must be an isomorphism, £{S) must be the classical (2n, n — k) binary linear block 
code that is generated by the n — k linearly independent generators £{Gj). 

Similarly, the quaternary stabilizer label code L(S) is the image of S under the quaternary label 
map. Evidently L{S) is a group under addition that is isomorphic to £{S) = {2,2)"'^^ ■ 

In order that all generators Gj G Q commute, the trace inner product of the quaternary labels 
of any two generators must be 0; i.e., L{S) must be self-orthogonal under the trace inner product. 
This holds if and only if the generators of L(S) are self-orthogonal and mutually orthogonal under 
the trace inner product. 

We will focus on the case in which L{S) is actually F4-linear; i.e., closed under multiplication 
by scalars in F4. L{S) is then a classical (n, (n — k)/2) linear block code over F4. This implies that 
the integer n — k must be even, and that L{S) is the set of all F4-linear combinations of (n — k)/2 
independent generators gj, 1 < i < (n — k)/2. 

Equivalently, L{S) is the set of all binary linear combinations of the n — k generators ujgi and 
i^Sij 1 < i < {n — k)/2. This implies that the set Q of generators Gj of S may be taken to be the 
n — k inverse images in 11" of this set of (n — k)/2 generator pairs under the inverse quaternary 
label map. (Note that when inverting label maps defined on 11", we take the inverse as the unique 
element of XI" with the given label; i.e., we fix the phase of the inverse image.) 

Moreover, if L(S) is F4-linear, then L(S) must be self-orthogonal under the Hermitian inner 
product, not just the trace inner product, since Tr (ag, h) = Tr a(g, h) is equal to for a = 1, w, aJ 
if and only if (g, h) = 0. 

The quaternary normalizer label code is defined as the orthogonal code L[S)-^ to L{S) with 
respect to the trace inner product; i.e., the set of all elements of (F4)" whose trace inner product 
with all elements of L{S) is zero. If L{S) is F4-linear, then, by the same argument as above, the 
orthogonal code L{S)-^ under the trace inner product must be equal to the orthogonal code L(S)-^ 
under the Hermitian inner product. Thus L{S)^ is a classical (n, (n -|- k)/2) F4-linear block code. 

The inverse image of L{S)^ under the inverse quaternary label map is called the projective 
normalizer group N{S) C [n"], or simply the "normalizer group," a commutative subgroup of [IT"] 
of size 2"+*^. In other words, L{N{S)) = L{S)^, so the normalizer group is the set of equivalence 
classes of all Pauli n-tuples that commute with all elements of the stabilizer group S. Evidently S 
is a subgroup of N{S), and the stabilizer label code L{S) is a subcode of L{N{S)). 

D. Quantum error correction 

We now explain briefly how an [n, k] stabilizer code may be used to encode the state of a fc-qubit 
system into that of an n-qubit system, and then to correct a certain set S of error patterns. 
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Let Ti denote the 2"-dimensional Hilbert space of the n-qubit system. The n — k independent 
commuting PauH n-tuple generators Gj of the stabiHzer group S each have eigenvalues {±1}, and 
have two corresponding orthogonal eigenspaces of dimension 2"'"^. It is straightforward to show 
that since the n — k generators are independent and commuting, the stabilizer group S that they 
generate has a set of 2""*^ orthogonal eigenspaces, each of dimension 2*^, corresponding to the 2""*^ 
possible combinations of {±1} eigenvalues of the generators. 

The 2'^-dimcnsional eigenspace for which all n — A; generator eigenvalues equal +1 (i.e., the 
subspace stabilized by S) is defined as the code subspace S C. H. For encoding, first the Hilbert 
space of a A;-qubit quantum system is embedded into Ti., e.g., by initializing the remaining n — k 
qubits to a fixed state. Then a unitary transformation maps this 2^-dimensional subspace into S. 

The object of quantum error correction is to recover the encoded state |(/>) G 5 from a possibly 
perturbed state G Ti. It turns out that it suffices to consider perturbations of the form 
\4>') = 'E\(j)) for an error pattern E which is a Pauli n-tuple, because all possible linear perturbations 
are linear combinations of Pauli n-tuples. 

By the general principles of quantum mechanics, a measurement of an operator of a quantum 
system yields an eigenvalue of that operator, and projects the system state onto the corresponding 
eigenspace. A set of operators may be measured simultaneously if and only if they commute. 

In decoding, we first measure simultaneously the n — k commuting generators Gj of S. This 
yields an (n — fc)-tuple of eigenvalues ±1, which may be mapped to a binary (n — fc)-tuple using 
the standard map {±1} — > {0, 1}. The resulting binary (n — A:)-tuple s = {s\, . . . , Sn^k) G (Z2)"'~*^ 
is called the syndrome sequence. This "hard decision" in fact extracts all relevant information. 

If the error pattern is E, then measurement of Gj results in the eigenvalue +1 if E commutes 
with Gj, or —1 if E anticommutes with Gj, regardless of the original state \(j)) G 5. {Proof: If E 
commutes with Gj, then Gj(E|^)) = EGj|0) = E|^); otherwise Gj(E|^)) = -EGj|0) = -E|0).) 

Thus the syndrome bit Sj depends only on E, and is given by Sj(E) = Tr (L(E), L(Gj)). The 
syndrome bit map Sj : [11"^] ^ Z2 is a homomorphisni, by the bilincarity of the trace inner product. 

The syndrom,e m,ap s : [11"] (^2)"^'^ defined by s(E) = {sj(E),l < j < n — k} is thus a 
homomorphism. Its kernel is the set of all equivalence classes of Pauli n-tuples that commute with 
all generators Gj, which is precisely the normalizer group N{S). It follows that each of the 2""'^ 
cosets of N{S) in [11"] maps to a distinct binary syndrome (n — fc)-tuple s. 

In the case where L(S) is F4-linear, we can compute an F4-syndrome equal to the Hcrniitian 
inner product (L(E), g) G F4 for any g G L(S) as follows. By F4-linearity, both cog and cJg are also 
in L{S). The corresponding pair of syndrome bits is 

(Tr (L(E),a;g),TV (L(E),^g)) = (Tr cZ;(L(E), g), TV u;(L(E), g)). 

Now observe that (Tr wa, Tr cJa) = {(0, 0), (1, 1), (1, 0), (0, 1)} for a = {0,1,lo,lo}; in other words, 
(Tr wa, Tr ZJa) = i{a),a G F4. Thus these two syndrome bits are the two bits of the binary label 
£((L(E),g)), which identifies the F4-syndrome (L(E),g). 

Thus we can measure the F4-syndromes S'fc(E) = (L(E), g^) for each of the (n — k) /2 generators 
gfe of the quaternary stabilizer label code L{S). The syndrome map then becomes a homomorphism 
S : [n"] (F4)("-'=)/2 with kernel N{S). Again, each of the 4("-'=)/2 cosets of N{S) in [H"] maps 
to a unique F4-syndrome (n — A;)/2-tuple S. 

The syndrome measurement projects the perturbed state |^') onto a state \4>") in the 2'^- 
dimensional eigenspace 5(s) that corresponds to the measured syndrome s (or S). If the actual 
perturbation was a Pauli n-tuple E, then \(/)') = E|0) is an eigenvector of >S(s), so \(f)") = 
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The next step in decoding is to find the most hkely error pattern E in the coset of N{S) whose 
syndrome is s (or S), called the coset leader. The most likely error pattern is assumed to be the 
one of lowest Hamming weight; i.e., the Pauli n-tuple with the fewest non-identity components. 

Finding the coset leader is an entirely classical computation. There are 2""'^ possible syndromes 
s (or S), so if n — A; is not too large, then the coset leaders may be precomputed, and this step may 
be performed by a table lookup in a table with 2'^~^ entries. In the QECC literature, the table 
lookup method is usually assumed, explicitly or implicitly. 

Finally, given the coset leader E, the perturbed state \(p') is "corrected" to E|0') = EE|(/)). 
Decoding is successful if the coset leader E is merely in the same coset of S as the actual error 
pattern E, so EE € S, because any error pattern EE G S stabilizes any £ S; i.e., error patterns 
in S do not affect states in S. 

The set of 2""^ coset leaders of the cosets of N{S) (including [I]) will be denoted by S. The set 
of correctable error patterns is then [S'S]. If [S'S] contains all error patterns of Hamming weight t 
or less, then S is called a t-error-correcting code. 

Since the Hamming distance function is a true metric, S will be t-error-correcting if the minimum 
Hamming distance d between cosets of S in N{S) is greater than 2t {i.e., if d > 2t + 1), because 
then two error patterns E and E of weight < t cannot lie in the same coset of N(S) unless they 
are in the same coset of S; i.e., EE cannot be in N{S) unless it is in 5. By the group property, 
this minimum distance d is the minimum Hamming weight of any nonzero coset of S in N{S); i.e., 
d is the minimum Hamming weight in N{S) \ S. 

An [n, k] stabilizer code in which N{S) \ S has minimum Hamming weight d is called an [n, k, d\ 
stabilizer code. We will consider only nondegenerate codes, in which the normalizer code L(N{S)) 
actually has minimum Hamming distance d; i.e., L{S) has a minimum distance of at least d. 



E. Summary: stabilizer codes from F4-linear codes 

In summary, to construct a nondegenerate [n, k, d] stabilizer code with n — k even, it suffices to find 
a classical self-orthogonal (n, (n — k)/2) F4-linear block code L{S) whose orthogonal (n, (n + k)/2) 
code L(S')-'- under the Hermitian inner product has minimum Hamming distance d"*" = d. 
Example A (Five-qubit "quantum Hamming code" ) . In order to construct a single-error-correcting 
[5, 1, 3] stabilizer code, we take the quaternary stabilizer label code L{S) to be the classical (5, 2, 4) 
self-orthogonal (doubly extended Reed-Solomon) code over F4 generated by 

UJ LO LJ UJ 

U uJ uj uj ' 

The orthogonal code L{N{S)) = L{S)-^ under the Hermitian inner product is then the (5,3,3) 
quaternary Hamming code. 

A [5,1,3] stabilizer code is single-error-correcting. Each of the 15 error patterns in H^ of 
Hamming weight 1 therefore lies in a distinct one of the 15 nonzero cosets of N(S); i.e., this 
code is a "perfect" single-error-correcting "quantum Hamming code." Decoding may be performed 
by a table lookup in a table that maps each of the 16 possible syndromes to the corresponding 
minimum-weight error pattern. □ 

Similarly, for all integers m > 2, there exist classical perfect F4-linear Hamming codes with 
parameters (n = (4"^ — 1)/3,A; = n — m,d = 3) that contain their orthogonal {n,m) codes [7]|1 

^By Bonisoli's theorem [30], the {n,m) code is equidistant, with all nonzero codewords having weight 4™"^. 
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These codes may be used to construct quantum [n = (4™ — l)/3,k = n — 2m, d = 3] Hamming codes 
that can be decoded using a lookup table with 4™ entries; e.g., stabilizer codes with parameters 
[5, 1, 3] , [21, 15, 3] , [85, 77, 3] , and so forth. 

F. CSS-type stabilizer codes from F2-linear codes 

The binary field F2 is a subfield of the quaternary field F4. Therefore the (n — k)/2 generators 
{Sj: ^ ^ j ^ {n- — k)/2} of a classical (n, (n — k)/2) binary linear code B may be taken as the 
generators of an {n,{n — k)/2) F4-linear code C. Since the Hermitian inner product of binary 
sequences is the ordinary binary inner product, C will be self-orthogonal if B is self-orthogonal. 

As we have seen, C may be characterized as the set of all binary linear combinations of the n — k 
generators {a;gj,uJgj | 1 < j < (n — k)/2}. The two-bit labels ^(wgj) are nonzero only in bit flip 
bits, whereas the labels £{ujgj) are nonzero only in phase flip bits. Therefore the binary code £{C) 
may be characterized as two interleaved, independent binary codes: namely, the code B applied to 
the n bit flip bits, and the code B applied to the n phase flip bits, respectively. In short, i{C) is a 
direct product code: 

i{C) = BxB. 

Similarly, the orthogonal code C"*" to C is generated by {n + k)/2 generators of the orthogonal 
(ra, (n -|- k)/2) binary linear code B^, and the corresponding binary code is the direct product code 
£(C"'") = B'^ X B'^. If the minimum distance of B'^ is d"*", then the minimum distance of C"*" is d"*". 

More generally, Calderbank and Shor [5j and Steane ^29j proposed codes of the form Bi x B2, 
where the bit flip code Bi and the phase flip code B2 are possibly different orthogonal binary codes. 
We will consider only codes of the type B x B, which we will call CSS-type codes. 

In short, to construct a nondegenerate [n, k, d] stabilizer code with n — k even, it suffices to find 
a classical self-orthogonal (n, (n — k)/2) binary linear block code B whose orthogonal (n, {n + k)/2) 
code B-^ has minimum Hamming distance d"*" = d. 

Example B (Seven-qubit Steane code) Consider the (7, 3, 4) binary linear (dual Hamming) code 
B that is generated by the following generators: 

1 1 1 1 
110 11. 
10 10 10 1 

This code is evidently self-orthogonal. Its orthogonal code B-^ is the (7, 4, 3) binary Hamming code. 
Thus the resulting stabilizer code is a [7, 1,3] single-error-correcting code. □ 
In general, CSS-type codes have poorer parameters [n, k, d] than general F4-linear codes, because 
binary codes have poorer parameters than quaternary codes. However, they have the advantage 
that bit flip and phase flip errors may be decoded separately, as follows. Note that the syndrome 
bits may be written as 

(Tr (L(E),aig,),Tr (L(E),u;g,)) = ((£2(E), g,), (£i(E), g,)), 

because i{ujgj) = (gj, 0) and iiuJgj) = (0, gj). In other words, the first syndrome bits in each pair 
form a set of (n — k)/2 syndromes for the phase error bits, and the second for the bit error bits. 
We can then decode each set of syndromes independently, using a decoder for the binary code B^. 
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If the Hamming weight of E is not greater than [(d — 1) /2j , then the Hamming weights of ii (E) 
and ^2(E) both satisfy the same bound, so decoding wih be successful. Indeed, two independent 
binary decodings of up to \_{d — l)/2j bit errors wih correct some higher-weight error patterns. 

Example B (cont.) A quaternary decoder for the (7,4,3) F4-Hnear code requires calculation 
of three F4-syndromes and table lookup in a 64-entry table (for complete decoding; single-error- 
correction requires at least 21 entries). A binary decoder for the (7,4,3) binary linear code B-^ 
requires calculation of three binary syndromes and table lookup in an 8-entry table. Two binary 
decodings of are thus arguably simpler than one quaternary decoding of C"*- . □ 

Similarly, for all integers m > 3, there exist classical perfect binary Hamming codes with 
parameters [n = 2"^ — l,k = n — m,d = 3) that contain their orthogonal {n,m) codes0 These 
codes may be used to construct single-error-correcting quantum [n = 2™ — 1, A; = n — 2m, d = 3] 
stabilizer codes that can be decoded by using a lookup table with 2™ entries twice; e.g., stabilizer 
codes with parameters [7, 1, 3], [15, 7, 3], [31, 21, 3], and so forth. 

In summary, while CSS-type codes based on binary codes may have poorer parameters [n, k, d] 
than codes based on F4-linear codes, they may nevertheless have advantages in terms of decoding 
complexity. (The question of decoding complexity seems hardly to have been addressed previously 
in the QECC literature, with a few notable exceptions, e.g., O [T71 [23].) For example, the [15,7,3] 
CSS-type code has comparable decoding complexity to the [5, 1, 3] 5-qubit quantum Hamming code, 
as well as comparable performance, but has a higher code rate. 

III. Quantum convolutional and tail-biting codes 

In this section, using the stabilizer formalism, we show how to construct quantum convolutional 
and tail-biting codes from classical self-orthogonal F4-linear and binary convolutional codes. 

A. Infinite-qubit systems 

A quantum convolutional code will be defined (at least in principle) on a quantum system containing 
a countably infinite ordered sequence of qubits; i.e., whose Hilbert space Ti = ■ ■ ■ ® T~L-i ^ TCq <X) 
Til (8) • • • is the tensor product of an infinite sequence of two-dimensional Hilbert spaces 7^j,i G Z, 
and thus is infinite-dimensional. 

A Pauli sequence A = <S>iez ^« acting on TC is an infinite tensor product of Pauli matrices 
Ai,i G Z. The set of all such infinite Pauli sequences may be denoted by H^. Again we may 
define the set [H^] = {/3A|A S H^,/? G C, = 1} of equivalence classes of Pauli sequences up to 
phase. The label maps i and L of Section II. A may be extended to maps from [H^] to sequences m 
((Z2)^)^ and (F4)^, respectively. Inner products and convolutions are well defined, provided that 
the corresponding sums involve only a finite number of nonzero terms. 

B. Convolutional stabilizer codes 

We will define a late-k/n convolutional stabilizer code, < /c < n, by a basic set oin—k independent 
commuting Pauli sequences Qq = {Gj,l < j < n — k}, where each generator Gj € Q has finite 
support; i.e., only finitely many Pauli matrices in Gj are not identity matrices. 

*By Bonisoli's theorem, the (n,m) code is equidistant, with aU nonzero codewords having weight 2"*"^. 
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The full generator set Q will then be the set of all shifts of the k basic generators in Qq by 
integer multiples of n qubits. We require the generators in Q to be independent and commuting. 
The code subspacc S will again be defined to be the subspace of Tl that is stabilized by Q. 

The stabilizer group S is again defined as the subgroup of [11^] of all products of generators in 
Q. The binary and quaternary label codes £{S) and L{S) again denote the images of S under the 
binary and quaternary label maps, respectively. 

In this paper we will only consider codes in which L{S) is F4-linear. Then n — k must be 
even, and L{S) is a classical rate-((n — k)/2)/n convolutional code over F4 generated by the set 
of all shifts by integer multiples of n symbols of some set of {n — k)/2 independent generators 
{gi) 1 < ^ < ('^ — k)/2} with finite support. In this case the generators in Qq may be taken as the 
inverse images of the n — k generators ugi and cUgj. 

Finally, in order that each generator in Qq commute with all shifts of all generators in Qq, the 
F4-linear convolutional code L{S) must be self-orthogonal under the Hermitian inner product; i.e., 
a subcode of its orthogonal code L[S)-^, a classical F4-linear rate-((n + k)/2)/n convolutional code. 

As with block stabilizer codes, a convolutional stabilizer code will turn out to have minimum 
distance d if the orthogonal code L{S)^ has minimum Hamming distance = d. 

We will focus on rate-(n — 2)/n convolutional stabilizer codes, for which the rates of L{S) and 
L{S)^ are 1/n and (n — l)/n, respectively. The generators of a rate-l/n classical convolutional 
code L{S) are the set of all shifts by an integer number of (F4)'^-blocks of a single finite-support 
sequence g = {g„,, G (F/i)",m G Z}. 

Example 1 (rate- 1/3, single-error-correcting, F4-linear convolutional stabilizer code). Consider 
the classical rate-1/3 F4-linear shift-invariant convolutional code C = L{S) that is generated by all 
shifts by integer multiples of 3 symbols of the generator sequence gi = (. . . |000|lll|la;aJ|000| . . .); 
i.e., whose generators are: 
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In Z'-transform notation (see Section IV), the basic generator is gi(-D) = (1 -I--D, 1 + ujD, 1 + u;D), 
and the set of all generators is {D^gi{D),£ € Z}. 

The corresponding stabilizer group S is then generated by sequences of Pauli matrices that 
correspond to multiples by to and aJ of these generators; i.e., the generators of S are the shifts 
by an integral munbcr of 3-blocks of the two basic generators (. . . \III\XXX\XZY\III\ . . .) and 
{...\III\ZZZ\ZYX\III\...). 

It is easy to verify that gi is orthogonal to itself and to any shift of itself under the Hermitian 
inner product, which suffices to show that all generators are orthogonal. Thus C is self-orthogonal; 
i.e., all generators of S commute. 

The orthogonal convolutional code C"*" under the Hermitian inner product is the rate-2/3 F4- 
linear convolutional code that is generated by all shifts of gi and g2 = (. . . |000|cZJu;l|000| . . .), whose 
-D-transform is g2(-D) = {lo,(jJ, 1). It is easy to verify that the minimum Hamming distance of C"*- 
is = 3, with the only weight-3 codewords being multiples of shifts of g2. The convolutional 
stabilizer code defined by C thus has minimum Hamming distance 3, so it is single-error-correcting. 

□ 
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In principle, the convolutional code C of Example 1 has an infinite number of generators gj, 

covering an infinite number of 3-blocks. However, because the support of each generator is only 
two 3-blocks, the code constraints are localized; the code symbols in any block depend only on the 
"current" and "previous" generators. Such a convolutional code is said to have a "memory" or 
constraint length of one 3-block {v = 1). 



C. Block codes from convolutional codes 

In data communications, where information symbols are often transmitted in a continuous stream, 
the non-block structure of convolutional codes is often a virtue rather than a problem. However, for 
the main applications currently envisioned for quantum error-correcting codes, such as protection 
of the state of a quantum computer, a block structure is desirable. In this subsection, we will 
discuss two methods of making a convolutional code into a block code: termination and tail-biting. 

To construct a terminated block code B from a convolutional code C, we simply take the 
generators of B to be the subset of all generators of C whose support lies in some given interval. 
Since B is a subcode of C, it will be self-orthogonal if C is self-orthogonal, and its minimum distance 
must be at least as great as that of C. The rate of B will in general be less than that of C, but it 
will approach the rate of C as the length of the interval increases. 

The orthogonal block code B^ will then be the code generated by the truncations of the gen- 
erators of the orthogonal convolutional code to the same interval. B^ may therefore have a 
smaller minimum distance than C'^, and may not be self-orthogonal even if C"*" is self-orthogonal. 

There are therefore two ways that we might think of terminating a convolutional stabilizer code 
defined by a classical F4-linear convolutional code C = L{S). We might try terminating to a 
block code B-^, thus keeping the minimum distance of B-^ equal to that of C"*-. However, the dual 
block code B will then be a truncation of the convolutional code C, which is not guaranteed to be 
self-orthogonal, so in general B will not define a valid block stabilizer code. The alternative is to 
terminate C to a block code B, thus ensuring self-orthogonality, but in this case the truncated code 
B-^ is not guaranteed to have the same minimum distance as C"*-. 

Example 1 (cont.) For example, taking the convolutional code as the rate-1/3 convolutional code 
C of Example 1 and an interval of three consecutive 3-blocks, the following two generators of C have 
support contained in the given interval: 



1 1 1 




1 LO U) 
1 1 1 





1 u uJ 



These generate a (9, 2) F4-linear terminated block code B, which is evidently self-orthogonal. 

The orthogonal block code B-^ is the (9, 7) block code generated by the following seven truncated 
generators of C^: 
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The minimum distance of B^ is now only 2 {e.g., the sum of the first two generators has weight 2). 
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Alternatively, taking the convolutional code as the rate-2/3 convolutional code C"*- of Example 
1 and the same three-block interval, the following five generators of C"*" have support contained in 
the given interval: 
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These generate a (9,5,3) F4-linear terminated block code 0^. 

The orthogonal block code is the (9, 4) F4-linear block code B generated by the following four 
truncated generators of C: 
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Now B is not even self-orthogonal, because the truncated generators are not self-orthogonal. □ 
For our purposes, tail-biting (see, e.g., [8j) is a better method of making a convolutional code 
into a block code. To construct a tail-biting block code B from a convolutional code C, we take 
the generators of B to be the subset of all generators of C whose "starting time" lies in some given 
interval. If the "ending time" lies outside the given interval, then we wrap the generator around to 
the beginning of the interval in "tail-biting" fashion; see the example below. We assume that the 
length of the tail-biting interval is greater than that of the support of any generator. 

It can be easily shown that the rate of B will be the same as that of C if the generators are 
noncatastrophic (see Section IV). There is now no guarantee that the minimum distance of B will be 
as great as that of C; however, in general the minimum distance will be preserved if the tail-biting 
interval is long enough [19]. The orthogonal block code B-^ will be the corresponding tail-biting 
block code derived from C^. Finally, if C is self-orthogonal, then B will be self-orthogonal. 

A tail-biting code B derived from a self-orthogonal convolutional code C may therefore be used 
to specify a block stabilizer code with the same rate as the convolutional stabilizer code derived 
from C, and, provided that the block length is large enough, the same minimum distance. 

Example 2 (rate-1/3, single-error-correcting, F4-linear tail-biting stabilizer code). If we again take 
the convolutional code as the rate-1/3 convolutional code C of Example 1 and a tail-biting interval 
of length three 3-blocks, then we obtain the following three tail-biting generators: 



1 1 1 



1 lJ 



1 UJ UJ 

1 1 1 






1 UJ UJ 

1 1 1 



Notice how the last generator has been "wrapped around." Thus these generators generate a (9, 3) 
F4-linear tail-biting code B. Moreover, since C is self-orthogonal, B is self-orthogonal. 



13 



The orthogonal block code is the (9, 6) F4-linear tail-biting code B-^ that is generated by the 
following six tail-biting generators: 



OJ UJ 1 

1 1 1 







1 UJ uJ 





1 UJ UJ 
UJ UJ 1 

1 1 1 








The minimum distance of B turns out to be d = 3, so B defines a [9, 3, 3] block stabilizer code. 



D. Decoding algorithms 

We now discuss how to decode a convolutional stabilizer code that has been constructed from a 
classical self-orthogonal F4-linear rate-k/n convolutional code C. 

As shown in Section II, we may first measure each generator of the convolutional code C to 
obtain a sequence S of F4-syndromes Sj = (L(E),gj) € F4, where L(E) denotes the quaternary 
error label sequence -^^(E), at a rate of k F4-syndromes for each n-block. The syndrome sequence 
S determines a coset C"*" + t(S) of the orthogonal convolutional code C"*", where t(S) is any error 
sequence whose syndrome sequence is sH We then need to find the minimum- weight coset leader 
in that coset, which is an entirely classical computation. 

A standard way of finding the leader of a coset C-'-+t(S) of a convolutional code is to represent 
the coset by a trellis diagram in which there is one-to-one correspondence between coset sequences 
and trellis paths, and then search for the lowest-weight trellis path by the Viterbi algorithm (VA) 
[12j . The trellis diagram may be taken as any trellis diagram for C"*", with all code sequences 
translated by the representative error sequence t(S). 

For example, the rate-2/3 convolutional code C"*" of Example 1 has a minimal trellis diagram 
with 4 states at each 3-block boundary, and 64 transitions between trellis states during each 3-block. 
A VA search through this trellis requires of the order of 64 computations per 3-block. 

If our objective is merely correction of single errors, however, then we can use the following much 
simpler algorithm. As long as all syndromes are zero, we assume that no errors have occurred. Then, 
if a nonzero syndrome Sj occurs, we assume that a single error has occurred in one of the three 
qubits in the jth block; the error is characterized by a label 3-tuple Bj = L(Ej). The nine possible 
weight-1 error 3-tuples ej lead to the following syndromes {Sj, Sj-^i) during blocks j and j + 1: 

"'For example, if S = eH^ and {H~^)^ is any left inverse of , then we may take t(S) — S{H^^)^ . 



□ 
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Since these 9 syndrome pairs are distinct, we may map (Sj, Sj+i) to the corresponding single-error 
label 3-tuple ej using a simple 9-entry table lookup, and then correct the error as indicated. (If 
(Sj, Sj+i) is not in the table — i.e., if Sj+i = — then we have detected a weight-2 error.) 

We see that this simple algorithm can correct any single-error pattern Ej, provided that there 
is no second error during blocks j and j + 1. The decoder synchronizes itself properly whenever a 
zero syndrome occurs, and subsequently can correct one error in every second block, provided that 
every errored block is followed by an error-free block. 

To decode the (9, 6, 3) tail-biting code B-^ of Example 2, we may use the same algorithm, but 
now on a "circular" time axis. Specifically, if only a single error occurs, then one of the three 
resulting F4-syndromes will be zero, and the other two nonzero. The zero syndrome tells which 
block the error is in; the remaining two nonzero syndromes determine the error pattern according 
to the 9-entry table given above. Thus again we need only a 9-entry table lookup. (Notice that the 
existence of a single-error-correcting decoder for B-^ proves that its minimum distance is d"*" = 3.) 

More generally, there are several methods of adapting the Viterbi algorithm to decode tail- 



biting codes [8j. The tail-biting code trellis diagram may be taken as a finite-length segment of 
the corresponding convolutional code trellis, with the further constraint that valid paths must 
start and end in the same state. An optimal decoding method is VA decoding of each subtrellis 
consisting of all paths starting and ending in a given state, followed by selection of the best of these 
decoded paths. A simpler suboptimal method is to regard the tail-biting trellis as being defined 
on a circular time axis, and to use a single VA search from an arbitrary initial state around and 
around the circular trellis, until convergence is obtained. 

E. Comparison of single-error-correcting codes 

We now briefly compare the rate, performance and decoding complexity of our single-error-correcting 
convolutional and tail-biting codes with those of comparable previous unrestricted QECCs. 

First, we will compare the decoding error probability per encoded qubit of our convolutional 
and tail-biting codes to that of the single-error-correcting 5-qubit block code (Example A). We 
assume that the probability of an error in any qubit is p, independent of errors in other qubits. 
Our estimates do not depend on the relative probabilities of X,Y oi Z errors. 

For the 5-qubit block code, a decoding error occurs if there are 2 errors in any block, so the 
error probability is of the order of (2)^^ = lOp^ per block, or per encoded qubit. 

For our rate-1/3 convolutional code, for each 3-qubit block, a decoding error may occur if there 
are 2 errors in that block, or 1 in that block and 1 in the subsequent block. The error probability 
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is therefore of the order of (3 + 3^)p^ = 12p^ per 3-qubit block, or per encoded qubit. 

Finally, for our [9, 3, 3] tail-biting code, a decoding error may occur if there are 2 errors in a 
block of 9 qubits, so the error probability is of the order of (2)^^ = 36p^ per block, or 12p^ per 
encoded qubit. 

We conclude that the decoding error probability per encoded qubit is very nearly the same for 

any of these three codes. 

With regard to rate and decoding complexity, our quantum convolutional and tail-biting codes 
have rate 1/3, which is greater than that of any previous simple single-error-correcting quantum 
code, block or convolutional. Our decoding algorithm involves only a 9-entry table lookup, which 
is at least as simple as that of any previous quantum code. 

Our convolutional code rate and error-correction capability (one error every two 3-blocks) are 
comparable to those of a [6, 2, 3] block stabilizer code. However, no [6, 2, 3] block stabilizer code 
exists (by the "quantum Hamming bound," since it would be a nondegenerate quantum MDS code). 

Our tail-biting code is a [9, 3, 3] block stabilizer code. We could obtain a code with the same 
parameters by shortening a [21,15,3] quantum Hamming code. However, such a shortened code 
would not necessarily have such a simple structure as our tail-biting code, nor such a simple decoding 
algorithm. 

F. CSS-type convolutional codes 

Similarly, as with CSS-type block codes, we may construct a CSS-type convolutional stabilizer 
code with minimum distance d from a classical self-orthogonal binary convolutional code C whose 
orthogonal convolutional code C-^ has minimum Hamming distance d"*" = d. Again, if the rate of C 
is (n — k)/2n, then the rate of C"*- will be (n -|- k)/2n, and the rate of the convolutional stabilizer 
code will be k/n. We continue to focus on rate-l/n codes. 

As with CSS-type block codes, wc will find that the parameters of CSS-type convolutional 
codes are in general poorer than those of codes based on general F4-linear codes, but that they 
may offer complexity advantages, since bit flip errors and phase flip errors may be decoded by two 
independent decodings of the binary convolutional code C"*". 

Example 3 (rate-1/3, single-error-correcting, CSS-type convolutional code). Consider the binary 
rate-1/3 convolutional code C whose generators are the shifts by an integral number of 3-blocks 
of the single basic generator g = (. . . |000|111|100|110|000| . . .), whose Z)-transform is g(-D) = 
(1+L» + L>2 1 + L>2 1): 
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The "memory" of C is thus two 3-blocks {i.e., its constraint length is ly = 2). 

The stabilizer group S is then generated by sequences of Pauli matrices that correspond 
to multiples of the above generators by lo and uJ. Thus the generators of S are the shifts by 
an integral number of 3-blocks of two basic generators, {. . .\III\XXX\XII\XXI\III\ . . .) and 
{. . .\III\ZZZ\ZII\ZZI\III\ . . .). Since these stabilizers affect only bit flip and phase flip bits, 
respectively, the code C is the direct product of two independent binary codes that protect the bit 
flip and phase flip bits, respectively. 
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It is easy to verify that g is orthogonal to itself and to any shift of itself under the usual binary 
inner product. This suffices to show that C is self-orthogonal. 

The generators of the orthogonal rate-2/3 binary convolutional code C"*" are the shifts of two 
basic generators, hi = (. . . |000|110|011|000| . . .) and = (. . . |000|001|110|000| . . .), whose D- 
transforms are hi(D) = (1, 1 + D,D) and h.2{D) = {D,D, 1), respectively: 
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It is easy to verify that the minimum Hamming distance of C is d = 3, with the only weight-3 
codewords being shifts of h2. Thus the rate- 1/3 convolutional stabilizer code defined by C has 
minimum Hamming distance 3, and is single-error-correcting. □ 

We now consider how to decode the Example 3 code. Wc will discuss only how to decode bit 
fiip errors; phase flip errors may be corrected independently and identically. 

For bit flip errors, we first measure each generator gj of C to obtain a sequence s of binary syn- 
dromes Sj = {ii(E),gj) G F2, where (£i(E),gj) denotes the binary inner product of the generator 
gj with the bit flip error label sequence ^i(E), at a rate of one binary syndrome for each 3-block. 

Again, instead of VA decoding the 4-statc trellis of the rate-2/3 code C"*-, we may use a simple 
single-error-correction algorithm, as follows. As long as all syndromes are zero, we assume that 
no errors have occurred. When a nonzero syndrome Sj occurs, we assume that a single error 
has occurred in one of the three bit flip bits in block j, corresponding to a binary label 3-tuple 
ej = £i{Ej). The three possible weight-1 error 3-tuples lead to the following syndrome sequences: 



e,7 




100 


(1,1,1) 


010 


(1,0,1) 


001 


(1,0,0) 



Since the three syndrome sequences are distinct, we can map {sj^i, Sj^2) to the corresponding 
single-error pattern using a simple 3-entry table lookup, and then correct the error as indicated. 
(If {sj+i, is not in the table — i.e., if (sj, Sj+i, Sj+2) = (1,1,0) — then we have detected a 

weight-2 error.) 

Wc sec that this simple algorithm can correct any single-error pattern e^, provided that there is 
no second error during blocks j through j -\- 2. The decoder synchronizes itself properly whenever 
a zero syndrome occurs, and subsequently can correct one error in every third block. 

Finally, we consider tail-biting codes derived from the rate- 1/3 convolutional code of Example 
3. In this case, it turns out that a tail-biting interval of N 3-blocks results in no loss of minimum 
distance whenever N > 5. 
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Example 4 (rate-1/3, single-error-correcting, CSS-type tail-biting code). Taking the rate-2/3 
binary convolutional code of Example 3 and a tail-biting interval of five 3-blocks, we obtain the 
following 10 tail-biting generators: 
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These generate a (15, 10, 3) binary tail-biting code B with minimum distance d = 3. The 
orthogonal block code B is the corresponding (15,5) binary tail-biting code B derived from C, 
which is necessarily self-orthogonal. Thus B specifies a [15,5,3] CSS-type single-error-correcting 
block stabilizer code. □ 
To decode this code, we can use the same simple decoding algorithm as for the corresponding 
convolutional code, but now on a circular time axis. If only a single error occurs, then the first 
syndrome 1 after two zeroes (on a circular time axis) identifies the 3-tuple block of the error, and 
the next two bits determine its position within the block, according to the 3-entry table above. 
Indeed, the fact that these 15 syndrome 5-tuples are distinct proves that single-error-correction is 
possible, and thus that B-^ has minimum distance 3. 



G. Comparison of single-error-correcting CSS-type codes 

We now compare our singlc-crror-correcting CSS-type convolutional and tail-biting codes with the 
single-error-correcting CSS-type 7-qubit Steane code (Example B). 

For decoding error probability, we again assume that the probability of an error in any qubit 
is p, independent of errors in other qubits. We do not take into account that, because of the 
independence of the two decoders, there are some weight-2 error patterns that are correctible {e.g., 
X and Z); this would yield a minor improvement (a factor of 7/9) in our estimates. 

For the 7-qubit Steane code, a decoding error may occur if there are 2 errors in any block, so 
the error probability is of the order of (J^p^ = 21p^ per block, or per encoded qubit. 

For our rate-1/3 convolutional code, for each 3-block, a decoding error may occur if there are 
two errors in that 3-block, or one in that 3-block and one in the two subsequent 3-blocks. The error 
probability is therefore of the order of (3 + 3 • 6)p^ = 21p^ per 3-block, or per encoded qubit. 

Lastly, for our [15, 5, 3] tail-biting code, a decoding error requires 2 errors in a block of 15 qubits, 
so the error probability is of the order of (2^)??^ = 105p^ per block, or 21p^ per encoded qubit. 

Again, we conclude that the decoding error probability is very nearly the same for any of these 
codes, and is about twice that of the F4-lincar codes considered earlier. 

With regard to rate and decoding complexity, our CSS-type convolutional and tail-biting codes 
again have rate 1/3, greater than that of any previous simple CSS-type single-error-correcting code. 
The decoder for Examples 3 and 4 only uses a 3-entry table lookup twice, and is arguably even 
simpler than the simple decoder for Examples 1 and 2. 
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Our convolutional code rate and error-correction capability (one error every three 3-blocks) 
are comparable to those of a [9, 3, 3] CSS-type block code. However, it can be shown (by linear 
programming) that no [9,3,3] CSS-type block code exists [T5l [T6]. 

Our tail-biting code is a [15, 5, 3] CSS-type block code. We could obtain a code with the same 
parameters by shortening a [31,21,3] CSS-type block code. However, such a shortened code would 
not necessarily have such a simple structure as our tail-biting code, nor such a simple decoding 
algorithm. 

IV. Algebraic theory of F4-linear convolutional codes 

In this section we give a brief presentation of the algebraic theory of F4-linear convolutional codes. 
We focus on those results which are most helpful in searching for good codes and for analyzing their 
performance. The theory of F2-linear convolutional codes is analogous. For further background, 
see [11], or any text that covers convolutional codes, such as pO] . 

A. Rate-l/n convolutional codes 

We have defined a rate-l/n F4-linear shift-invariant convolutional code C with constraint length 
V as the set of all F4-linear combinations of the shifts of a single basic finite generator sequence 
g = {gjk, 1 < J < n, < A; < z^} by an integral number of n-blocks. 

It is helpful to use "Z)-transform" (generating function) notation, as is standard for convolutional 
codes. A sequence of n-blocks such as g is written as an n-tuple g(-D) = {gj{D), 1 < j < n} of D- 
transforms gj{D) = gj^D^, where D is an indeterminate, called the shift operator. For example, 
the generator g = (. . . , 000, 111, luZJ, 000, . . .) is written as the polynomial 3-tuple 

g{D) = {gi{D),g2{D),g3{D)) = {1 + D,l + ojD,l +lJD), 

where we have aligned the first nonzero block with the index k = 0. 

A shift of g(-D) by an integral number i of n-blocks is then represented by the /^-transform 
D^g(D) = {D^gj{D), l<j< n}, where D'^gj{D) = T.kdjkD^'"'' ■ For example, a one-block shift of 
the generator g(-D) is represented by Dg{D) = {D + D'^,D + ajD"^, D + uJD'^). 

The rate-l/n convolutional code C is then the set of "all" F4-linear combinations of the shifted 
generators {D^g{D),£ G Z}; i.e., 

C = {Y^ueD'giD) I G F4} = {u{D)giD)}, 

where we have defined u{D) as the L)-transform "^^ugD^ of the coefficient sequence {ui}. 

We have put "all" in quotation marks because usually, for technical reasons, the coefficient 
sequence {ui} is required to have only finitely many nonzero U£ with negative indices £ < 0. Such 
a sequence is called a Laurent power series, and the set of all Laurent power series in D over F4 is 
denoted by ¥^{{0)). In short, 

C = {u{D)g{D) I u{D) G F4((Z)))}. 

The set F4((i:>)) is shift-invariant; i.e., D'^¥^{{D)) = F4((i:>)) for any £ G Z. Consequently, C is 
shift-invariant: D^C = C. 
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The set ¥^{{0)) is actually a field under sequence (componentwise) addition and sequence 
(polynomial) multiplication {i.e., a{D)b{D) = 'Ylik Tlik' '^k'^k-k') ■ In particular, every nonzero 
sequence u{D) € F4((D)) has a multiplicative inverse \/u{D), which may be found by polynomial 
long division. For example, the inverse oil + D isl + D + D"^ + 

The set F4((Z)))"' of all n-tuples of Laurent power series is an n-dimensional vector space over 
the field ^^{{D)). A rate-l/n code C is therefore simply a one-dimensional shift-invariant subspace 
of F4((Z)))"^. Any nonzero code sequence u{D)g{D) £ C may thus be taken as a generator for C. 

We wish to choose a canonical generator g{D) G C that has the most desirable properties. For 
most purposes, the best choice is a polynomial code sequence g(-D) € C of least degree, where 
we define degg(D) = maxj{deg gj{D)}. Given any nonzero polynomial code sequence c{D) = 
{ci{D) , . . . , Cn{D)) £ C, a minimum-degree polynomial generator is g{D) = c{D)/d{D), where 
d{D) is the greatest common divisor of the polynomials Cj{D). Conversely, a polynomial generator 
g(Z)) is minimum-degree if and only if its components gj{D) are relatively prime. The minimum- 
degree polynomial generator g(-D) is thus unique up to multiplication by nonzero scalars in F4. 

A minimum-degree polynomial generator g(-D) has the following properties [11^ I20j: 

• A code sequence c{D) = u{D)g{D) E C is polynomial if and only if u{D) is polynomial; i.e., 
the set of all polynomial code sequences is {u{D)g{D),u{D) E F4[L>]}, where F4[L)] denotes 
the set of all polynomials in D over F4. This is called the noncatastrophic property. 

• The constraint length v = degg(Z)) is minimized. 
B. Orthogonality 

The Hermitian inner product of two Laurent power series a{D), b{D) E F4((D)) is defined as 

{a{D),b{D)) = Y.albk. 

k& 

The sum is well defined if and only if there are only finitely many nonzero summands a\bk. 
The Hermitian inner product of two Laurent n-tuples a(D),b(D) E F4((D))" is defined as 

n 

{^{D)MD)) = Y,{aj{D),b,{D))- 
The cross- correlation sequence of a{D),h{D) is defined as 

n 

R^^,{D) = Y,o.]{D-^)b,{D), 

again assuming well-defined products aj{D^^)bj{D). Thus 

R.h,i = J2Y.''lkhk-i = {si{D),D'h{D)). 

j k 

Therefore a sequence a(D) is orthogonal to all shifts D^h{D) of a sequence h{D) if and only if 

R.h{D) = 0; 

i.e., if and only if all cross-correlation terms -Rab,^ are equal to zero. 
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A rate-l/n linear shift-invariant convolutional code C with generator g(-D) is thus self-orthogonal 
if and only if 

n 

Example 1. The sequence g(-D) = (1 -|- D, 1 -|- luD, 1 -|- lJD) is orthogonal to all of its shifts since 
Rsg{D) = {l + D-^){l + D) + {l+ZJD'^){l+ujD) + {l + ujD-^)il+uJD) 

Thus the convolutional code C generated by all shifts of g(-D) is self-orthogonal. □ 
Example 3. The sequence g'(-D) = (1 + D + D^, 1 + D^, 1) is orthogonal to all of its shifts since 

Rg'g'iD) = {I + D-'^ + D~^){1 + D + D^) + {1 + D~^){1 + D^) + 1 
= (D-'^ + l + D'^) + {0-^ + 0"^) + 1 = 0. 

Thus the convolutional code C generated by all shifts of g'{D) is self-orthogonal. □ 
The orthogonal code C"*" to a rate-l/n convolutional code C with generator g{D) is the set 
of all sequences sl{D) that are orthogonal to all shifts D^g,{D), and thus are uncorrelated with 
g(Z)) — i.e., such that Rag{D) = 0. It follows that C"*" is a rate-(n — l)/n F4-linear shift-invariant 
convolutional code — i.e., an (n — 1) -dimensional shift-invariant subspace of F4((Z)))"'. 

It is again desirable to choose as generators for C"*" a set of n — 1 linearly independent minimum- 
degree polynomial generators hi{D),l < i < n — 1, such that i?hig(-C) = 0. This can be done 
by an exhaustive search for low-degree orthogonal polynomial sequences, or by various algebraic 
methods. Again, such a minimal-degree generator set has the following properties [11^ I20j: 

• A code sequence c{D) = ^ ■ Ui{D)h.i{D) E C"*- is polynomial if and only if u{D) is polynomial; 
i.e., the generator set is noncatastrophic. 

• The total constraint length u-^ = ^^v^ - = ^^deg 114(1?) of the generator set is minimized, 
and is equal to the constraint length u oi C [13j. This latter property may be used to check 
whether a set of independent orthogonal generators is a minimal-degree set. 

Example 1. For the code C generated by the degree-1 generator g(-D) = (H-D, l+uoD, I+loD), the 
two sequences hi(L)) = g(-D) and h.2{D) = (lJ, w, 1) are independent, are orthogonal to g(-D), and 
have degrees = 1 and V2 = that sum to = 1. Therefore {hi(Z?), h2(D)} is a minimal-degree 
set of generators for the orthogonal rate-2/3 code C^. □ 

Example 3. For the code C generated by the degree-2 generator g'{D) = {1 + D + D^, 1 -|- D^, 1), 
the two sequences h.[{D) = (1,1 + D,D) and h.'2{D) = {D,D,1) are independent, are orthogonal 
to g'(D), and have degrees = 1 and = 1 that sum to u = 2. Therefore {h.[{D),h.2{D)} is a 
minimal-degree set of generators for the orthogonal rate-2/3 code C"*". □ 
In view of the noncatastrophic property, the minimum Hamming distance d-^ of the orthogonal 
code is the minimum weight of any nonzero polynomial code sequence Y^-Ui{D)hi[D), where 
{ui{D), 1 < i < n — 1} is any set of polynomial sequences. For simple codes, the minimum- 
weight nonzero sequence will be a polynomial sequence of low degree, and will often be obvious by 
inspection. For instance, for both of our example codes, one generator hj(L') has weight 3, and it 
is easy to see that no nonzero sequence in C"*" can have weight less than 3, so = 3. 
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C. Convolutional code symmetries 

In searching for generators of good codes, it is helpful to observe that there are certain symmetries 
that preserve the most important properties of convolutional codes. A symmetry that converts 

g{D),h.{D) € F4((I?))" to g'{D),h.'(D) G F4((D))"' will be called weight-preserving if Hamming 
weights are preserved, and orthogonality-preserving if i2gh(-D) = implies R^'h'iD) = 0. 

Theorem 1 (Convolutional code symmetries) The following symmetries o/F4((D))" are both 
weight-preserving and orthogonality-preserving: 

1. Multiplication of any component gj{D) by any monomial aD^, a 7^ 0,^ G Z. 

2. Conjugation: g{D) — g^(-D). 

3. Time-reversal: g{D) g{D~^). 

4- Modulation: g{D) — > g{aD) for any nonzero scalar o; G F4. 
5. Permutation of the components gj {D) . 
Proof. It is obvious that each symmetry is weight-preserving. 

To show that each symmetry is orthogonality-preserving, we argue in each case that if i?gh(-D) = 
and g{D) and h.{D) are changed to g'{D) and h'(D), then i?g/h'(-D) = 0, using 

n 

RMD) = ^g]{D-')hj{D). 

1. If gj{D), hj{D) aD'^gj{D),aD'^hj{D), then Rg'h'iD) = ^gh(£>), since 
a^D-'g]iD-')aD%{D) = g]{D-^)h,{D). 

2. If gp),hp) ^ gt(D),ht(L>), then i2gh(L>) ^ 4h(^)- 

3. If g(L»),h(L») ^ g(L>-i),h(£»-i), then R^^{D) ^ RsUD'^)- 

4. If g(L>),h(L>) ^ g{aD),h{aD), then R^hiD) ^ Rgh{aD). 

5. Permutation of the gj{D) and hj{D) in the same way does not affect Rg\i{D). □ 

In particular, if g{D) is a self-orthogonal generator, then the modified generator g'(-D) under 
any of these symmetries is self-orthogonal. 

The first symmetry shows that, without loss of generality, we may assume that all component 
generators gj{D) are monic polynomials; i.e., the zero-degree coefficient gj^ of gj{D) is 1. 

Example 1. It is easy to see that a degree- 1 generator is self-orthogonal if and only if it is equivalent 
to g{D) = {1 -\- D,l + LuD, 1 -\- UD) under one of these symmetries (see Section V). □ 

Example 3. The degree-2 binary generator g'{D) = (1 -|- -D -|- D^, 1 -\- D^, 1) is invariant under 
conjugation, and effectively invariant under time-reversal. There are 6 equivalent binary generators 
under component permutations. No further equivalent binary generators are produced by the 
symmetry g{D) — > g{aD). As we will see in Section V, g'(-D) is the unique monic degree-2 binary 
self-orthogonal generator, up to component permutations. □ 
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Example 5. The degree-2 generator g"(-D) = {1+D+D'^, l+wD+D^, l+D) satisfies i?g//g'/(D) = 
0, so the convolutional code C" generated by all shifts of g"{D) is self-orthogonal (see Section VI). A 
minimal-degree generator set for the orthogonal code (C")-*" is {hi(D) = {loD,loD, 1 + D),h2{D) = 
(1, l+UD, 1 + iJD)}. The minimum distance of (C")^ is d"*" = 4. There are 6 equivalent generators 
to g"(D) = {1 + D + D'^, 1 + ujD + D^, l + D) under conjugation and the symmetry g{D) — > g{aD), 
or 36 if component permutations are also considered. □ 

V. Rate-l/n single-error-correcting codes 

Using the theoretical development of Section IV, it is straightforward to find all possible short- 
constraint-lcngth, single-error-correcting, convolutional stabilizer codes based on both binary and 
F4-linear rate-l/n convolutional codes. 

In order that a rate-l/n linear shift-invariant convolutional code C generated by g{D) = 
{gi{D), . . . ,gn{D)) has an orthogonal code with minimum distance > 3, it is necessary 
and sufficient that all component generator polynomials gj{D) be linearly independent, so that no 
weight-2 error pattern can cause a zero syndrome. If all generator polynomials gj{D) are restricted 
to be monic, then this reduces to the requirement that all gj{D) be different. 

To find single-error-correcting stabilizer codes, it therefore suffices to list all monic polynomials 
g{D) of low degree, with their autocorrelation functions Rgg{D) = g^ {D~^)g{D), and to identify 
all subsets g{D) of size n such that Rgg{D) = Yl^=i ^gjOji-^) — 0- 

In Table I, we therefore list all binary polynomials g{D) of degree 3 or less, with the non-negative- 
degree components [Rgg{D)]Q+ of their autocorrelation functions (the negative-degree components 
are symmetric). For 3 < n < 8, subsets of size n are identified such that the corresponding autocor- 
relation functions sum to zero. There exists a unique binary self-orthogonal rate-l/n convolutional 
code with constraint length v = 2: namely, the rate-1/3 Example 3 code. Seven further codes are 
listed with constraint length u = 3 and rates from 1/4 down to 1/8. (It is easy to verify that none 
of these generator sets is catastrophic.) In turn, these binary codes yield single-error-correcting 
CSS-type convolutional stabilizer codes with quantum code rates ranging from 1/3 up to 6/8. 
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11111111 

34455568 


1 

l + D 

l + D^ 

l + D + D'^ 

1 + D^ 

1 + D + D^ 

l + D^ + D^ 

1 + D + D'^ + D^ 


1 

D 
D^ 

1 + L»2 

D^ 

l + D + D'^ + D^ 
l + D + D'^ + D^ 
D + D^ 


* * * * 
* * * * 



Table I. Self-orthogonal binary rate-l/n convolutional codes. 



To decode these rate-l/n CSS-type codes, n > 4, as with our rate-1/3 CSS-type code, bit flip 
and phase flip bits may be decoded independently in two binary decoders. Since there are only n 
possible single-error patterns ej in the jth. n-block, decoding requires only an n-entry table lookup. 
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Decoding will succeed if there is no second error during blocks j through j + 3; i.e., each decoder 
can correct 1 error in every 4 n-blocks. 

The minimum-length single-error-correcting tail-biting code that can be derived from any of 
these codes is easily determined by finding the minimum tail-biting length for which all cyclic shifts 
of all n single-error syndromes are distinct. For the eight codes listed in Table I, the minimum- 
length corresponding tail-biting codes are listed in Table II. Additionally, we give the number N^± 
of words of weight d-^ in B^, and an upper bound dcss on the minimum distance of a CSS-type 
code. Again, these codes may be decoded by the same simple n-entry table lookup algorithm, 
operating on a circular time axis. 



rate 






B 


B^ 


stabilizer code 


c^css 


1/3 


2 


2 


(15,5,6) 


(15,10,3) 


[15,5,3] 


3 


1/4 


3 


4 


(20,5,8) 


(20,15,3) 


[20,10,3] 


3 


1/4 


3 


2 


(20,5,8) 


(20, 15,3) 


[20, 10,3] 


3 


1/5 


3 


6 


(30,6,12) 


(30,24,3) 


[30, 18, 3] 


3 


1/5 


3 


9 


(35, 7, 10) 


(35,28,3) 


[35,21,3] 


3-4 


1/5 


3 


3 


(35, 7, 14) 


(35,28,3) 


[35,21,3] 


3-4 


1/6 


3 


15 


(42, 7, 14) 


(42,35,3) 


[42,28,3] 


3-4 


1/8 


3 


28 


(56,7,20) 


(56,49,3) 


[56,42,3] 


3-4 



Table II. CSS-type rate-l/n tail-biting codes. 



Similarly, in Table III we list all 16 monic quaternary polynomials g{D) of degree 2 or less, 
along with the non-negative-degree components [i?pg(D)]o+ of their autocorrelation functions. For 
3 < n < 16, certain subsets of size n are identified such that the sums of the corresponding autocor- 
relation functions are zero. There exists a unique F4-linear self-orthogonal rate-l/ra convolutional 
code with constraint length v = 1: namely, the rate- 1/3 Example 1 code. Five further codes are 
listed with constraint length u = 2 and rates 1/4, 1/5, 1/6, 1/10 and 1/16. (Again, none of these 
generator sets is catastrophic.) These codes yield single-error-correcting convolutional stabilizer 
codes with quantum code rates ranging from 1/3 up to 14/16. 

In this case, since there are only 3n possible quaternary single-error patterns Ej in the jth n- 
block, decoding requires only a 3n-entry table lookup. Decoding will succeed if there is no second 
error during blocks j through j + 2; i.e., each decoder can correct 1 error in every 3 n-blocks. 

Again, the minimum-length corresponding single-error-correcting tail-biting code may be de- 
termined by finding the minimum tail-biting length for which all cyclic shifts of all 3n single-error 
syndromes are distinct. For the six codes listed in Table III, these tail-biting codes are listed in 
Table IV. Additionally, we give the number A^^x of words of weight in B^, and an upper bound 
dopt on the minimum distance of a general quantum code. Most of the codes meet this bound on 
minimum distance. Again, these codes may be decoded by the same simple 3n-entry table lookup 
algorithm, operating on a circular time axis. 
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* 


* 
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* 


* 


1 + D + LoD^ 
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* 


* 
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* 




* 


* 
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* 
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* 
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l + D + D"^ 
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* 
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1+0JD + ujD^ 


1+UJD+ ujD'^ 










* 
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Table III. Self-orthogonal F4-linear rate-l/n convolutional codes. 



rate 


u 




B 




stabilizer code 


dopt 


1/3 


1 


3 


(9,3) 


(9,6,3) 


[9,3,3] 


3 


1/4 


2 


12 


(20,5) 


(20,15,3) 


[20, 10, 3] 


4 


1/5 


2 


15 


(15,3) 


(15,12,3) 


[15,9,3] 


3 


1/6 


2 


33 


(30,5) 


(30,25,3) 


[30, 20, 3] 


4 


1/10 


2 


108 


(40,4) 


(40, 36, 3) 


[40,32,3] 


3 


1/16 


2 


600 


(80,5) 


(80, 75, 3) 


[80, 70, 3] 


3-4 



Table IV. F4-linear rate-l/n tail-biting codes. 



VI. Rate-1/3 codes with d> 3 

We have performed a computer search for both binary and F4-linear self-orthogonal convolutional 
codes with constraint lengths up to = 12 and v = 6, respectively. The best codes found have 
orthogonal codes with Hamming distances d-^ = 10 and d-^ = 9, respectively. 

We examined one code from each equivalence class under the symmetries of Theorem 1. In 
particular, we considered only monic generators g{D). We eliminated catastrophic generators. For 
each code found, we found a minimal-degree pair of orthogonal generators, hi(D) and h2{D), such 
that deghi(L>) + degh2(-D) = degg(-D). We then found the minimum distance of the orthogonal 
code by a trellis search. For the F4-linear codes, we found the notation of Jonsson j21j to be helpful. 

Table V shows the best binary codes found for constraint lengths 2 < < 12. The best code is 
the one whose orthogonal code has the greatest minimum distance d"*-; to resolve ties, minimization 
of the number N^± of code sequences of weight d'^ is used as a secondary criterion. A unique best 
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code (up to the symmetries of Theorem 1) was found for u = 2,3, 5, 6, 7, 10, 11 and 12. For brevity, 
we represent polynomials by their coefficient sequences; e.g., 1101 = 1 + D + D^. 
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4 
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11 
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4 
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4 
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10 
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111011011 


1011000001 
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3 
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10 
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11 


100001010111 
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9 


1 
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12 


1110010000010 1101110010011 1011111000111 


0111111 10010101000111 


10 


5 










1010001 1111001 1010100 







Table V. Self-orthogonal binary linear rate-1/3 convolutional codes. 

Similarly, Table VI shows the best F4-linear codes found for constraint lengths 1 < < 6. For 
1 < 1/ < 5, the codes are unique up to equivalence. 
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Table VI. Self-orthogonal F4-linear rate-1/3 convolutional codes. 



For each of these QCCs, we also found the minimum-length corresponding tail-biting code that 
preserves minimum distance. We first found the minimum weight per cycle ("slope") a of the 
orthogonal code, and then evaluated the upper bound L < {d-^-fa] of Handlery et al. [1^ on the 
minimum number L of 3-blocks in the corresponding rate-2/3 tail-biting code. Using MAGMA [1], 
we then found the minimum distances of tail-biting codes of up to this length to determine L. 

Table VII shows the minimum-length tail-biting codes corresponding to the rate-1/3 binary 
convolutional codes of Table V. 
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Table VII. CSS-type rate-1/3 tail-biting codes. 



Similarly, Table VIII shows the minimum-length tail-biting codes corresponding to the rate-1/3 
F4-linear convolutional codes of Table VI. 
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Table VIII. F4-linear rate-1/3 tail-biting codes. 



VII. Conclusion 

In this paper, we have introduced two types of quantum convolutional codes based on classical self- 
orthogonal rate-l/n F4-linear and F2-linear convolutional codes, respectively, with corresponding 
decoders. We have also introduced quantum tail-biting block codes based on these codes, which 
have the same rate, performance and decoding complexity. We have shown that these codes have 
a potentially attractive tradeoff between performance and complexity for moderate-complexity 
applications. 

In classical coding, convolutional coding was the next step beyond block coding. The next 
step was to concatenate convolutional codes with algebraic (Reed-Solomon) outer codes for higher 
performance. Finally, in the past decade, capacity-approaching codes such as low-density parity- 
check (LDPC) codes and turbo codes with iterative decoding have become the preferred techniques 
for highest performance. One may anticipate an analogous sequence of advances in quantum coding. 
Indeed, MacKay et al. have already taken a step toward quantum LDPC codes [23], although not 
without some difficulties. 
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